CVE-2018-25051

Low

Description

A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the argument article.title/content.title/article.tag leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is be1914ef0a6808e00f51618b2de92496a3604415. It is recommended to apply a patch to fix this issue. The identifier VDB-216957 was assigned to this vulnerability.

SeverityLow

CVSS2.4

Exploit probability—

ProductPomash

PublishedDec 28, 2022

First seenDec 28, 2022

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update

pomash_project pomash2018-12-29 or later

Patches

github.com/JmPotato/Pomash/commit/be1914ef0a6808e00f51618b2de92496a3604415

Affected products

Product	Affected versions	Fixed in
pomash_project pomash	v < 2018-12-29	2018-12-29

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.